Verify github action SHA pinning

Author: lesserwhirls

.github/workflows/verify-pinned-actions.yml

@@ -0,0 +1,15 @@
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  verify-pinned-actions:
+    name: Verify Pinned Actions
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: lesserwhirls/pinned-actions-verifier@8bbef4d6a3d1da175a7364a3fb9bef6e5e51d1fc
+        env:
+          TOKEN: ${{ secrets.GITHUB_TOKEN }}